$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: DSNapQh7x71ogr30/NmY/Md498Ch487OznyVLT4R8mU= Subject key identifier: 29:12:56:63:AA:DB:7F:EF:25:09:C6:85:8E:75:03:98:EC:B9:3A:DF Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0CEE Signing time: Sat 04 Apr 2026 18:04:36 +0000 Manifest this update: Sat 04 Apr 2026 18:04:35 +0000 Manifest next update: Sat 11 Apr 2026 18:04:35 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: rRP/Pjg1iJWrsdl9XjbZxuk4AkQ7P3XfL9xTxVQ7qKI=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: 8onqQ0Hgne8VuBR8MMAfBmsUbYc+lMndFteIlBMEozQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Apr 4 18:04:35 2026 GMT Not After : Apr 11 18:04:35 2026 GMT Subject: CN=69d152b3-d2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:66:04:64:1d:9f:b7:75:61:43:c8:a2:fd: f0:cb:96:8d:62:f7:1f:76:9b:ad:e7:e2:be:0a:78: c1:68:18:9d:7f:8d:a6:0e:ad:45:b7:d5:44:b7:5b: 6c:a6:ca:2c:df:1a:86:ad:4a:3e:0d:d4:e7:a3:fe: 1e:29:8e:a0:34:ab:0e:72:36:0f:b7:cc:31:30:ee: 2d:29:4d:5e:9d:f9:28:58:be:ba:30:63:1a:59:f4: 37:3d:80:83:8e:df:ce:26:55:e3:d2:86:ed:86:c8: 7f:a5:64:6c:97:15:97:dd:0d:85:05:94:91:2a:87: 7e:d4:3a:77:b3:04:ae:db:2e:99:0f:c6:06:eb:22: 90:06:08:d6:a0:47:fa:d8:d8:85:f2:bf:c1:d7:db: 5d:49:9e:24:59:0e:95:ff:6d:7b:b2:68:4f:4f:02: 7d:ec:76:11:46:40:e6:4d:15:7f:ae:fc:74:94:12: 9d:d9:40:88:2f:2d:9d:1d:ea:df:24:f7:6b:92:f9: 88:65:d1:0f:7a:cc:7a:cc:d0:4f:94:f4:4b:7d:5c: 9f:82:48:78:36:a4:ca:6f:e9:18:07:39:45:67:d7: 1e:e6:dc:28:c4:9f:39:aa:bb:da:4d:4f:51:b9:55: a6:33:9c:01:c9:c8:30:a8:1c:fd:15:63:a1:ac:78: 5b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:12:56:63:AA:DB:7F:EF:25:09:C6:85:8E:75:03:98:EC:B9:3A:DF X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:03:7a:07:70:f7:88:a4:1b:81:fd:66:89:9e:00:b8:46:fd: 02:c1:f7:ef:52:43:c2:7f:7c:95:34:01:1b:04:bd:56:5d:15: 6e:5e:2f:3d:d4:12:c3:db:ea:de:0c:8e:a3:1c:eb:7e:c3:87: 9f:ba:9a:87:1f:be:86:4b:8f:fd:e6:73:57:92:9d:14:35:ca: a0:61:a1:35:2e:7f:2c:ac:22:19:f9:59:bd:99:4a:6b:95:92: 56:80:bc:b2:90:f8:3f:57:4a:16:5c:af:88:48:e3:79:9f:29: 99:be:bf:c6:d3:78:6f:ee:2a:2b:21:52:06:ba:41:be:19:ad: a2:42:4e:f3:61:c3:77:0f:fe:aa:e4:9d:22:8f:75:97:d9:89: 7c:e1:2a:fb:36:f0:51:c9:2b:32:78:d2:71:65:2d:a4:72:0c: ff:82:6a:53:c8:2c:39:0f:59:48:b7:e4:5a:a9:50:e6:aa:c1: 56:66:7b:9d:80:86:f4:5f:37:bf:0b:ff:e5:d0:7b:f9:d2:9d: 84:14:52:1a:f1:26:fa:f9:35:98:0e:39:b6:42:7a:fd:32:d6: 6c:f3:31:64:7c:35:cd:0e:80:2d:2c:c7:57:f9:62:c2:46:62: b6:2e:65:90:78:dd:7c:28:98:ad:f3:8f:4b:4e:15:b2:4c:b7: eb:1c:79:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjYwNDA0MTgwNDM1WhcNMjYwNDExMTgwNDM1WjAYMRYwFAYD VQQDEw02OWQxNTJiMy1kMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0tmBGQdn7d1YUPIov3wy5aNYvcfdput5+K+CnjBaBidf42mDq1Ft9VEt1ts psos3xqGrUo+DdTno/4eKY6gNKsOcjYPt8wxMO4tKU1enfkoWL66MGMaWfQ3PYCD jt/OJlXj0obthsh/pWRslxWX3Q2FBZSRKod+1Dp3swSu2y6ZD8YG6yKQBgjWoEf6 2NiF8r/B19tdSZ4kWQ6V/217smhPTwJ97HYRRkDmTRV/rvx0lBKd2UCILy2dHerf JPdrkvmIZdEPesx6zNBPlPRLfVyfgkh4NqTKb+kYBzlFZ9ce5twoxJ85qrvaTU9R uVWmM5wBycgwqBz9FWOhrHhbDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkSVmOq 23/vJQnGhY51A5jsuTrfMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHQN6B3D3iKQbgf1miZ4AuEb9AsH371JDwn98lTQBGwS9Vl0Vbl4vPdQSw9vq 3gyOoxzrfsOHn7qahx++hkuP/eZzV5KdFDXKoGGhNS5/LKwiGflZvZlKa5WSVoC8 spD4P1dKFlyviEjjeZ8pmb6/xtN4b+4qKyFSBrpBvhmtokJO82HDdw/+quSdIo91 l9mJfOEq+zbwUckrMnjScWUtpHIM/4JqU8gsOQ9ZSLfkWqlQ5qrBVmZ7nYCG9F83 vwv/5dB7+dKdhBRSGvEm+vk1mA45tkJ6/TLWbPMxZHw1zQ6ALSzHV/liwkZiti5l kHjdfCiYrfOPS04Vsky36xx5Kw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:57 2026 by rpki-client